sophos central deployment

Do they have any ‘management agent’ that can run an exe? 
The installer link is unauthenticated so that should help if you could even just run some Powershell at the client to call the invoke-webrequest (alias wget with -outfile Parma) and run it with some switches. 

if you don’t have anything that can ‘pull’ an installer and run it you are left with pushing to the endpoints which takes longer because they aren’t always on so you need a retry mechanism. Plus the requirements for the push potentially complicate things. Pull is easier than push.

they don't have any management agent.i dont know with sccm can i push the installer to endpoints with needing an AD or some authentication server ??

Hi simbarashe madziture1

You can check the SCCM deployment method mentioned here. Please refer to this article that describes the options available in order to deploy Sophos Central managed software.